Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
File: 7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft (raw, json)
Hash identifier: Sh31wfy0zLxq9DJjsTNkufe43O/65WM2ddTzDDULT9Q=
Subject key identifier: 65:6A:19:BA:CF:9D:83:72:89:48:68:E6:4B:63:43:DF:7A:2D:A8:86
Authority key identifier: EC:BB:F2:BA:5B:32:E4:2E:8B:6C:03:B8:36:D7:64:F9:75:B5:89:8F
Certificate issuer: /CN=ecbbf2ba5b32e42e8b6c03b836d764f975b5898f
Certificate serial: 019E1F11759DEEC956127D2C4F8A503F6489
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
Manifest number: 1748
Signing time: Wed 13 May 2026 02:01:38 +0000
Manifest this update: Wed 13 May 2026 02:01:38 +0000
Manifest next update: Thu 14 May 2026 02:01:38 +0000
Files and hashes: 1: 6XsZO_TltMpWaIXpEJ9j4Ijt3Wo.roa (hash: AmndDW7NkmhQPmIE+LZ+wdkjraSPxi3//yw9gxzh3WQ=)
2: 7Lvyulsy5C6LbAO4Ntdk-XW1iY8.crl (hash: KK7Fg58LxhCTOdHkxeP6hynarZe+DgFixTOp6aWx3+Q=)
3: qS1FhvHNjTct9kkj2vIxWEw1yv8.roa (hash: WpowF4fjiVOFY59c2MXRRHLypjY6PRS8W4ndaISZRLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:75:9d:ee:c9:56:12:7d:2c:4f:8a:50:3f:64:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecbbf2ba5b32e42e8b6c03b836d764f975b5898f
Validity
Not Before: May 13 02:01:38 2026 GMT
Not After : May 14 02:01:38 2026 GMT
Subject: CN=656a19bacf9d8372894868e64b6343df7a2da886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:4b:7d:76:2c:24:a1:df:da:49:65:99:ef:24:
b9:81:a2:bc:dc:e4:14:c8:60:c7:a9:3f:0a:01:62:
47:ab:e5:59:1a:71:bc:d1:6c:3f:1c:38:66:d1:13:
de:5d:9d:59:c8:d5:32:6a:bd:82:1f:f8:11:a9:97:
92:df:92:29:6b:09:be:6e:03:60:ba:38:51:b4:b6:
25:09:38:5d:d0:97:f9:3b:28:db:02:15:72:d6:9c:
ea:69:a2:80:24:b6:c3:e2:c1:1d:2e:68:ba:88:3d:
db:4e:6b:b0:b6:e8:ca:c8:84:73:74:35:0b:b5:a2:
1b:99:1e:b4:93:cb:9c:5b:43:cb:d6:61:d4:6e:a9:
a3:67:06:45:c7:9c:5f:f1:d4:56:41:b7:20:bd:0f:
24:3b:04:94:a2:ec:24:51:2c:12:43:cd:53:6d:14:
09:09:73:5d:e5:c7:c2:d3:53:0c:a9:09:c2:43:36:
ef:08:1e:fc:d9:76:d6:c7:dd:ae:a3:b7:60:19:b3:
02:2c:9e:67:73:74:35:0a:dd:0e:7f:65:c2:b9:12:
a7:9b:78:fe:b1:b3:31:b3:8e:2d:ef:df:00:36:2f:
a3:1f:04:65:c7:fb:7c:a6:3d:7c:69:e8:07:99:73:
0a:b1:07:47:0f:5c:a3:5b:ef:3d:b8:47:1c:89:b8:
bd:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:6A:19:BA:CF:9D:83:72:89:48:68:E6:4B:63:43:DF:7A:2D:A8:86
X509v3 Authority Key Identifier:
keyid:EC:BB:F2:BA:5B:32:E4:2E:8B:6C:03:B8:36:D7:64:F9:75:B5:89:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:8d:f2:bb:ba:4b:da:12:36:ab:a9:4d:41:24:ee:f2:f9:52:
da:eb:f5:71:61:a0:6d:dc:00:b3:d5:07:72:20:82:0a:eb:f8:
50:73:54:6a:9f:ed:b9:24:1c:4f:df:53:94:e7:73:94:21:28:
f0:23:99:48:64:c3:f6:2c:b9:6a:f6:35:22:68:1f:62:4c:c4:
15:c0:44:2c:22:b3:01:84:aa:34:75:43:46:0a:67:e2:21:09:
b5:01:5d:07:6c:e5:7f:42:9c:49:d4:3b:2f:55:b7:d5:eb:01:
84:e9:9e:b4:e7:1c:0b:aa:ab:cd:ec:9a:64:f7:e4:35:3a:77:
2e:f1:fc:ab:25:65:ee:96:46:01:7b:16:94:0c:37:d4:df:16:
83:fd:ec:72:cc:14:5d:e6:67:36:37:a5:7d:50:2e:8e:71:33:
60:45:50:dd:f9:44:ac:6d:12:48:07:17:c6:d5:74:8a:4b:c6:
cc:aa:b9:83:fb:49:28:ef:a7:d3:6e:14:3f:76:84:35:bd:19:
3d:e5:7c:91:2f:55:54:9b:f9:3d:76:a7:30:5c:75:17:ea:66:
7f:63:c5:35:84:d2:28:f2:82:5d:94:6e:6a:18:57:bd:b8:01:
ea:8a:d0:a0:52:d4:0e:ba:41:9a:52:c0:e1:a9:0a:9b:e1:4b:
91:30:cf:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:33:54 2026 by rpki-client